173 matches found
CVE-2021-2348
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2348
CVE-2021-2348 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Tools and Frameworks), version 11.3.1.5. The vulnerability allows a low-privileged, network-authenticated attacker to read a subset of data via HTTP, indicating a confidentiality impact. Descriptions across ...
CVE-2021-2346
CVE-2021-2346 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Tools and Frameworks) with affected version 11.3.1.5. The vulnerability is exploitable over HTTP by a low-privilege attacker on the network; successful attacks require human interaction and can lead to unaut...
CVE-2021-2346
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Tools and Frameworks. The supported version that is affected is 11.3.1.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2345
CVE-2021-2345 affects Oracle Commerce Guided Search and Oracle Commerce Experience Manager (Tools and Frameworks) with a vulnerability in version 11.3.1.5. The issue allows a low-privilege, network-accessible attacker (HTTP) to compromise the product, requiring user interaction, and potentially l...
Oracle Commerce Experience Manager 输入验证错误漏洞
Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...
Oracle Commerce输入验证错误漏洞
Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...
Oracle Commerce 输入验证错误漏洞
Oracle Commerce Guided Search enables people to interactively navigate data regardless of the size and complexity of the underlying data in real time through an easy-to-understand and use interface. Oracle Commerce Experience Manager is an intuitive web-based solution that enables you to create,...
The vulnerability of the Workbench search system of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager, a tool for managing the user environment, allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.
The vulnerability of the Workbench search engine component of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager user environment management tool exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to...
CVE-2020-14536
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2020-14536
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network...
Design/Logic Flaw
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2020-14536
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2020-14536
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Workbench. Supported versions that are affected are 11.0, 11.1, 11.2 and prior to 11.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2020-14536
The CVE-2020-14536 entry concerns Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Workbench) with affected versions 11.0, 11.1, 11.2 and prior to 11.3.1. The vulnerability details a difficult-to-exploit issue that allows an unauthenticated attacker, over HTTP, to compromise th...
Oracle Commerce Guided Search/Oracle Commerce Experience Manager Component Denial of Service Vulnerability
Oracle Commerce is a suite of e-business solution platforms from Oracle Corporation, USA. Oracle Commerce Guided Search/Oracle Commerce Experience Manager component is one of the components that supports the ability to dynamically Oracle Commerce Guided Search/Oracle Commerce Experience Manager...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2017-3572
CVE-2017-3572 affects Oracle Commerce Guided Search/Oracle Commerce Experience Manager (MDEX subcomponent). Affected versions: 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1, 6.5.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequent crash of the aff...
CVE-2017-3572
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...
CVE-2016-5482
Unspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2, 6.3.0, 6.4.1.2, and 6.5.0 through 6.5.2 allows remote attackers to affect confidentiality and integrity via unknown vectors...